HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

ADD A NEW IDEA

Security

Showing 303 of 8509

Each protocol should have its own ACL

For a given server, there is no way to specify a subset of users allowed to connect to POP3, another subset of users allowed to use IMAP, etc. I need a way to restrict which users are allowed to use a specific protocol.
about 6 years ago in Domino / Security 0 Under Consideration

Samesite attributes to be strict or lax for the sessionID this is usually found on the application that uses XPAGES.

After following the article below, only DomAuthSessId can only be setup to strict or lax. The samesite attributes of the sessionID have no value. https://help.hcltechsw.com/domino/12.0.0/admin/conf_samesite_cookie.html
about 2 years ago in Domino / Security 2 Already Exists

Capability to identify actual file format using attachment properties.

When users change the file extension ( .exe to .txt ) in Windows Explorer, Domino should have capability to identify actual file format using attachment properties.
about 6 years ago in Domino / Security 1 Under Consideration

Web site rules document allows to apply wildcard (*) for HTTP response codes with exceptional codes

This feature is created as requested by customer. There are many HTTP response codes, so it will be much more efficient if the feature of " internet site document allows to apply wildcard (*) for HTTP response codes with exceptional codes" can be ...
over 2 years ago in Domino / Security 0 Needs Review

To Disable Backward/Forward arrow from the iNotes browser window

Hello Team, This is regards with iNotes web Access. Currently we can see the Backward Arrow Active and end users are able to use Backward and forward arrow in the browser. Customer would like to Disable the Backward/Forward arrow from the Browser ...
over 2 years ago in Domino / Security 1 No Plans to Implement

Disabling wink to be used as a potential attack vector

Seeing more and more attempts to use Wink as an attack vector (see example below). Looking into possibility to disable wink so that it wont cause any potential security risk. 03/17/2022 10:04:27 AM HTTP JVM: 1399490 [Thread-11] INFO org.apache.win...
over 2 years ago in Domino / Security 2 Already Exists

Domino to have permissions policy header

There are customers who are experiencing permissions-policy vulnerability. This is the former "Feature Policy" with new specs. Can domino have the same to mitigate vulnerabilities related to it?
over 2 years ago in Domino / Security 3 Needs Clarification

Wants to change the SAML URL which hard coded with /names.nsf?SAMLLogin

If SAML URL customization is the bussiness requirement so SAML URLshould be flexible which currently hard coded with /names.nsf?SAMLLogin
almost 5 years ago in Domino / Security 2 Needs Clarification

Rate limiting protections for Domino

An authentication endpoint without rate limiting protections can be susceptible to innumerable amounts of credential stuffing and eventual guessing of set of credentials used for authentication. API endpoints can also be used to attack further inf...
over 2 years ago in Domino / Security 1 Needs Clarification

User defined keystore for Domino

Currently, the Notes/Domino v9.x (same with newer versions) can only use the default JAVA trust keystore under Domino application server. The JAVA update overwrites this default keystore. Please add the option to set a custom,user defined keystore...
over 2 years ago in Domino / Security 2 Needs Review
Copyright © 2023 HCL Technologies Limited